Cloud IAM Engineer

Matrix Global

3h

About The Position

We are seeking a highly skilled Cloud Identity and Access Management (IAM) Engineer with strong experience designing and implementing enterprise‑grade identity solutions across cloud and hybrid environments. The ideal candidate will bring hands-on expertise with Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP), along with practical experience applying DevOps principles and supporting enterprise IAM platforms integrated with on‑premises systems.
This role requires deep technical knowledge, strong engineering discipline, and the ability to create scalable IAM patterns that align with industry standards, security requirements, and enterprise architecture.

Requirements

• Deep practical experience working with Microsoft Azure cloud services.
• Hands-on experience with core Azure AD technologies, including: Azure AD Connect Conditional Access Multi‑Factor Authentication (MFA) Azure AD Directory Roles Azure Privileged Identity Management (PIM) Azure Subscription RBAC Access policies for major Azure services
• Working knowledge of: Modern and legacy authentication protocols (SAML, OAuth, OIDC, NTLM, Kerberos, Basic Auth) Azure policy and governance tools (Azure Policy, Blueprints, Graph API, ARM, Azure AD Health, Azure Security Center)
• IAM administration and integration in AWS
• IAM configuration and management using Google Cloud Identity
• CI/CD frameworks and DevOps toolchains (e.g., Jenkins, SALT, Kubernetes, Docker)
• Scripting and automation using Azure CLI, PowerShell, and/or Python
• 5+ years of IT experience, including 3+ years of hands-on engineering experience with cloud-focused IAM solutions.
• Experience contributing within DevOps engineering teams operating under Scrum/Agile methodologies.
• Strong academic background in Computer Science, Engineering, or a related technical field.
• Requirements
• null

Nice To Haves

• Preference for candidates with relevant cloud certifications (Azure, AWS, GCP).
• Beneficial experience with Active Directory, ActiveRoles Server, and federation technologies.

Responsibilities

• Design, engineer, and coordinate execution of IAM controls across Azure, Office 365, AWS, GCP, and various SaaS platforms.
• Architect and implement integrations with on‑premises identity services, such as Ping Federate, Radiant Logic Virtual Directory, ActiveRoles Server, and Active Directory.
• Collaborate with Enterprise Security and IT teams to develop integrated processes for implementing and tracking IAM controls.
• Engage with stakeholders across Enterprise Technology, Security, and business partners to gather requirements, define solution options, and validate IAM decisions for cloud initiatives.
• Develop, document, and implement standardized IAM design patterns across application, platform, and infrastructure layers.
• Architect cloud IAM components to support onboarding and integration of new SaaS services.
• Conduct POCs and feasibility studies to evaluate next‑generation cloud IAM solutions; prototype as needed for emerging requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed